Ledger in 2026: The Device Has Never Been Broken. The Customer List Has Been Leaked Twice, and a Founder Lost a Finger.

Ledger has sold more than seven million devices and claims to secure roughly a fifth of the world's crypto assets. In over a decade of operation, no attacker has ever remotely extracted a private key from a locked Ledger device. On the thing hardware wallets exist to do, its record is close to perfect.

In the same period, Ledger customers have had their names, home addresses and phone numbers exposed twice. The 2020 database was dumped publicly and has been worked by criminals ever since, through phishing emails, extortion demands, packages containing tampered replacement devices, and as recently as April 2026 printed letters posted from inside Europe.

And in January 2025, one of Ledger's own co-founders was kidnapped from his home in central France. His captors cut off one of his fingers and sent a video of it to another co-founder with a ransom demand.

All three of those statements describe the same company. An honest review has to sit inside that contradiction rather than pick a side.

Where Ledger came from

Ledger SAS was founded in Paris on 22 September 2014, formed by the merger of three Parisian startups: La Maison du Bitcoin (later renamed Coinhouse), BTChip and Chronocoin. [1][2][3]

There were eight co-founders, a number confirmed both by Ledger's own site and by Éric Larchevêque's 2019 leadership letter, in which he refers to starting the company "with my 7 co-founders". [4][5]

Sources do not fully agree on the complete list, so this review names only those consistently identified: Éric Larchevêque, Nicolas Bacca, Joël Pobeda, Thomas France, Vanessa Rabesandratana and David Balland. Other names appear in individual sources without corroboration. [1][2][3][6][7]

The backgrounds explain the product. Nicolas Bacca founded BTChip, which built an open-standard secure element hardware wallet that was the direct precursor to the Ledger device, and had previously developed smartcard operating systems. Joël Pobeda founded Chronocoin after fifteen years in retail and distribution. Thomas France co-founded La Maison du Bitcoin with Larchevêque, Europe's first physical bitcoin exchange counter. Vanessa Rabesandratana came from Chronocoin and built Ledger's customer service function. Several of the founding engineers came from Oberthur Technologies and Gemalto, both smart-card and secure-element specialists. [2][7][8]

That is the origin of Ledger's central design choice: use the same class of certified chip found in passports and payment cards, rather than a general-purpose microcontroller. It is the decision that has kept the device unbroken for a decade.

Who runs it

Éric Larchevêque was CEO from founding until 2019, when he moved to Executive Chairman and handed the role to Pascal Gauthier. He has since stepped back from day-to-day involvement. Bloomberg lists him as former chairman and co-founder. In France he is widely known as a jury member on the M6 show Qui veut être mon associé?, and French press estimated his personal fortune at €340 million in 2024. [5][6][9][10][11]

One warning for anyone researching this independently: Tracxn currently lists Larchevêque as Ledger's CEO, and older Crunchbase text says the same. Both are stale. Ledger's own 2019 announcement and every current source confirm Gauthier. [3][12][13]

Pascal Gauthier is Chairman and CEO. He was Ledger's first investor in 2014, joined the board in 2015, became President in 2017 and CEO in 2019, adding the chairman title in 2020. Before Ledger he worked at Kelkoo, spent five years as COO of Criteo during its global expansion, then was a venture partner at Mosaic Ventures. He founded and remains non-executive chairman of Kaiko, the crypto market data company, and sits on the board of Komainu, the institutional custody joint venture with Nomura and CoinShares. [14][15][16][17]

Headquarters are in Paris, with manufacturing and logistics at Vierzon, plus offices in the UK, US, Switzerland and Singapore. Headcount appears in Ledger's own job listings as anywhere from "more than 500" to "almost 1,000" depending on the date, so read it as roughly 900 to 1,000 today. [18][19][20]

Money

[3][7][21][22][23]

Tracxn puts the total at roughly $575 million across seven rounds from 72 investors. Named backers include 10T Holdings, Samsung Ventures, Morgan Creek Capital, Cathay Innovation, Draper Dragon and Molten Ventures. [3][24]

Ledger is private and publishes no financials. Revenue, profitability and current valuation are not public. In December 2023 the company cut 12% of roles, with Gauthier citing macroeconomic headwinds limiting revenue. That letter is still on Ledger's blog, which is more transparency than most private companies offer about a layoff. Gauthier has described the company as "IPO-ready" without committing to a date. [7][25]

On scale, be careful with Ledger's own numbers. Its job listings have said "more than 5 million units in 180 countries" and "over 25% of the world's crypto assets" in one place, and "more than 6 million in 200 countries" and "over 20%" in another. Gauthier said 6.5 million Nanos in December 2023. Secondary sources now say over seven million. The market-share figure in particular is a company estimate, not an audited number, and should be attributed. [18][19][25][26]

The 2026 lineup

Ledger has rebranded its devices as "signers" rather than hardware wallets, and renamed Ledger Live to Ledger Wallet. Anyone searching for the old name will still find plenty of references to it. [27]

[28][29][30][31][32]

Prices vary widely across sources, particularly for the two older Nanos, so any figure needs a date attached. The Nano S Plus and Nano X are reported as discontinued from production and available while stocks last. [30]

Three things buyers routinely get wrong.

The security is identical across the range except the Nano X. The $399 Stax and the $79 Nano S Plus use the same ST33K1M5 secure element and the same firmware. You are paying for screen size and materials, not for stronger key protection. [29][31][33]

The Nano X is the odd one out. It carries the older ST33J2M0 at EAL5+, one tier below everything else. Ledger's own comparison page acknowledges it. Buying one new in 2026 with the Gen5 sitting beside it is hard to justify. [27][31][32]

The screen is a security feature, not a luxury. The E Ink touchscreens on the Gen5, Flex and Stax enable Clear Signing and Transaction Check, which turn raw smart contract data into human-readable details and flag suspicious transactions before you approve them. On the small OLED Nanos you see far less at once, which makes complex transactions genuinely harder to verify. If you touch DeFi at all, this matters more than build quality. [27][34]

The Nano Gen5 launched in late 2025 at $179 as the first Nano with a secure E Ink touchscreen, shipping with a Ledger Recovery Key NFC card that normally costs $39, also included with Flex and Stax. Reception was mixed: power users complained that six-step approval flows slow high-volume trading, others questioned the price for incremental upgrades, and the 20% upgrade discount for Nano S owners had technical problems at launch. [32][35]

On asset support, treat the headline numbers with suspicion. Figures range from 5,500 to 15,000 across sources. The reconciliation from the most careful review: around 500 assets are managed natively inside Ledger Wallet, and the larger figures count assets reachable by pairing the device with third-party wallets such as MetaMask and Rabby. That is still excellent coverage, but it is not the same claim. [28][30][32]

Security architecture

Every Ledger runs a certified secure element plus BOLOS, Ledger's proprietary operating system, which isolates apps from one another. Keys are generated on the device, never leave the secure element, and every transaction requires physical confirmation. [2][29]

The firmware is closed source and cannot be independently audited. Ledger's mitigation is publishing third-party audits of LedgerOS on a public GitHub page, the most recent by Synacktiv in January 2026. That is meaningfully better than nothing and meaningfully weaker than Trezor or Keystone publishing the code itself. [29][33]

Ledger devices also have no physical kill switch for Bluetooth. It is disabled in software only. Trezor's Safe 7 offers a hardware switch. [33]

Ledger Donjon, and the conflict at the heart of it

Ledger runs an in-house offensive security lab called Ledger Donjon, and it is the most consequential security research operation in the consumer hardware wallet industry.

Donjon has published attacks against nearly every major competitor. It demonstrated seed extraction from an ELLIPAL device in 2019, which prompted ELLIPAL to redesign its hardware and create a bug bounty programme. It disclosed a tearing attack against Tangem cards in September 2025 and a laser fault injection attack against them in July 2026, both unpatchable. In June 2026 it published a laser fault injection attack on the TROPIC01 chip inside Trezor's flagship Safe 7.

The responses tell you as much as the research. Trezor published the disclosure itself and credited the competitor that broke its chip. ELLIPAL paid a bounty and created its bug bounty programme in response. Tangem disputed all three disclosures, declined the bounty each time, and pointed at Donjon's employer.

Name the conflict rather than dodging it. A commercial rival's lab is the primary source of published vulnerabilities against competing products. Donjon publishes full methodology and reproduction steps, which is what genuine research looks like, and most vendors have accepted the findings. Both facts are true at once.

And note the asymmetry: Donjon attacks rivals' hardware and publishes the results, while Ledger's own firmware stays closed to outside inspection.

The incident record

Four public events since 2020. None touched the secure element. All four matter.

The 2020 e-commerce breach

On 25 June 2020, an unauthorised third party accessed Ledger's e-commerce and marketing database. It exposed over 1,075,382 subscriber email addresses and the complete personal details, including full name, postal address, phone number and products purchased, of approximately 272,853 customers. In December 2020 the entire database was published on RaidForums, putting it within reach of anyone. [36][37]

A separate incident the same year involved a rogue employee at Shopify, one of Ledger's e-commerce providers, leaking data on around 292,000 customers. [38]

The consequences ran for years and moved off the internet. Victims received phishing emails and texts impersonating Ledger support. Criminals demanded $700 to $1,000 in Bitcoin with threats of doxxing or physical harm. In 2021 some customers received packages containing tampered "replacement" devices with official-looking letters instructing them to enter their recovery phrase on modified hardware built to steal seeds. New campaigns using the same list were still documented in December 2024, and in 2025 MetaMask's threat report recorded physical letters posted to 2020 victims on fake Ledger stationery. [36][37][39]

One analysis puts Ledger's total cost from the breach at over $33 million. That figure comes from a single source and should be attributed rather than stated as fact. [37]

Ledger Recover, May 2023

On 16 May 2023 Ledger announced Ledger Recover, a paid subscription that shards an encrypted copy of the user's seed across three custodians: Ledger, Coincover and EscrowTech. Restoring requires government photo ID and facial recognition, after which two custodians return their shards to the device. [40][41]

No funds were lost and nobody was enrolled automatically. The service was, and remains, opt-in.

The backlash was about what it proved. For Recover to work at all, the firmware shipping on every Ledger device had to contain the capability to package an encrypted seed and send it off the device under an approved code path. That sat awkwardly against years of marketing built on the promise that keys never leave the secure element. For many users it shifted Ledger from a trustless model to a trusted one. Gauthier defended the design and said the meaningful residual risk was subpoena: three coordinated government orders, one per custodian jurisdiction, could reconstruct a seed. [40][41]

Three years later, Recover is still cited in reviews of the Nano Gen5 as a live trust issue. [35]

The Connect Kit exploit, December 2023

On 14 December 2023, a former Ledger employee was phished, giving attackers access to their NPMJS account by bypassing two-factor authentication with a stolen session token. The attacker published malicious versions of Ledger Connect Kit (1.1.5, 1.1.6 and 1.1.7), the JavaScript library that lets decentralised applications connect to Ledger hardware. [42][43]

Because most dApps loaded the library at runtime from a CDN rather than pinning a version, the poisoned code propagated across the ecosystem within minutes. Affected front ends included SushiSwap, Zapper, Revoke.cash, Balancer, Phantom and Lido. Critically, users who did not own a Ledger were also at risk, because the compromise was in the dApp front end, not in the device. [42][44][45]

The malicious code was live for roughly five hours. Losses are reported at $484,000 by CoinDesk and around $600,000 to $610,000 by SlowMist and ZachXBT. Ledger pushed a clean version 1.1.8 and worked with Tether to freeze the attacker's USDT. [43][45][46][47]

The response was strong on remediation and revealing on process. Gauthier committed to reimbursing affected victims by the end of February 2024, and Ledger announced it would sunset blind signing on its devices by June 2024. Revoke.cash's own retrospective identified the underlying failure: publishing rights on the library were inadequately controlled, and developers could not pin versions. [48][49]

The Global-e breach, January 2026

On 4 and 5 January 2026, Ledger disclosed that Global-e, the third-party merchant of record handling international orders placed on Ledger.com, had suffered unauthorised access to order data. The disclosure was amplified by ZachXBT. Exposed: names, postal addresses, email addresses, phone numbers and order details including product purchased and price paid. [50][51][52]

Private keys, recovery phrases, PINs, payment card numbers and Ledger Recover identity data were not involved. Ledger stressed that its own hardware, firmware and app systems were not breached, and that Global-e is the data controller responsible for notification. The number of affected customers has never been published. [50][53][54]

Phishing began within hours, with fraudsters impersonating Ledger and Global-e support to pressure recipients into handing over recovery phrases. [52][55]

The postal campaign, April 2026

By April 2026 the campaign had gone physical again. Customers received printed letters on Ledger letterhead instructing them to complete an "Authentication Check" or "Transaction Check", with a hard deadline of 30 April 2026 and threats of limited wallet access and disabled Clear Signing. At least one documented envelope carried a Spanish postal stamp dated 13 April 2026, indicating operational infrastructure inside Europe rather than an overseas mailing. [36][39]

This is the single most useful warning you can give a Greek reader. Ledger does not send physical letters asking you to do anything involving your recovery phrase. Any such letter is fraud, however convincing the letterhead.

January 2025: what happened to David Balland

The article could stop at data breaches. It should not, because the most serious consequence of being publicly identified as a crypto owner in Europe happened to one of Ledger's own founders.

On the morning of Tuesday 21 January 2025, David Balland, then 36, a Ledger co-founder and former employee, and his partner were kidnapped from their home in Méreau, in the Cher department of central France. They were separated and driven to two different locations. [56][57][58][59]

The kidnappers contacted another Ledger co-founder and demanded a large ransom in cryptocurrency. Reported figures vary between €10 million and around $11.5 million; the Paris prosecutor did not disclose the amount at the time. [56][60][61]

The attackers severed one of Balland's fingers and sent a video of the mutilated hand to his associates as ransom pressure. A source close to the case identified the recipient as Éric Larchevêque, who alerted police. [58][62][63]

The rescue involved roughly 230 police and gendarmes, including the GIGN, France's elite hostage unit, working alongside cryptocurrency experts. Balland was freed on the Wednesday night at a house near Châteauroux after police tracked a suspect's vehicle by GPS. His partner was found the following day, tied up in a vehicle in Essonne, physically unharmed. Balland was hospitalised for the injury to his hand. [58][60][62][64]

Part of the ransom was paid during police-managed negotiations. Prosecutor Laure Beccuau stated that almost all of the cryptocurrency was subsequently traced, frozen and seized. Investigators sent one Bitcoin, roughly $105,000, to buy time and track the criminals. The WhatsApp account used by the kidnappers was linked to a Southeast Asian phone number and registered through a VPN. [58][60][64]

Ten people were taken into custody, nine men and one woman aged 20 to 40, most already known to police. Three were released without charge. Seven were placed in pre-trial detention on charges of gang-related kidnapping, acts of torture and armed extortion, carrying potential life sentences. One suspect fled to Spain and was arrested in March 2026 in Benalmádena, Andalusia, after moving between Valencia, Seville and Cádiz using online-rented accommodation. French extradition proceedings followed. [56][61][62][65]

Gauthier's statement at the time: Ledger was deeply relieved that David and his wife had been released and were safe, grateful to law enforcement for their swift action, and described it as a traumatic situation the company hoped would never be repeated. [60][64]

Two things need saying clearly.

This was not caused by the data breaches. Balland was a publicly known co-founder of a French unicorn. No link between the leaked customer lists and his kidnapping has been established, and none should be implied.

But it is the proof of the argument. Jameson Lopp's archive of known physical attacks on cryptocurrency holders recorded this as roughly the seventh such incident in the first three weeks of January 2025 alone, and France saw further kidnappings of crypto entrepreneurs and their relatives through that year, including another case where a finger was severed. When a database of confirmed hardware wallet owners with home addresses circulates among criminals, this is the category of risk at the far end of it. [63][66][67]

Credibility

Trustpilot places Ledger at 3.4 to 3.5 out of 5 across captures between November 2025 and August 2026, from roughly 2,478 to 2,624 reviews. That is mid-table for this category: above OKX and Tangem, well below Keystone's 4.6. [68][69][70]

Positive themes: simple setup and daily use, multi-year owners reporting no issues, quick resolution of shipping problems, and Donjon's research reputation cited approvingly by users. Ledger replies publicly to a high share of reviews. [68][69][70]

Negative themes: dead-on-arrival units with slow warranty resolution, support described as unresponsive in specific cases, and repeated complaints about the integrated swap partner Changelly, which reviewers say has frozen funds pending source-of-funds and KYC checks even after documents were provided. [68][69]

One category needs care. Some reviewers attribute stolen funds to a "compromised device". In the visible cases Ledger's position is that the loss came from phishing, and there is no documented case of a locked Ledger device having its key extracted remotely. Report the complaints as complaints, do not endorse the causal claim, and note that the 2020 list makes Ledger owners unusually well-targeted phishing victims. One reviewer states an intention to escalate to FEVAD, the French consumer mediation body. [69]

Buying one in Greece

Ledger manufactures and ships from France, with logistics at Vierzon. For a Greek buyer that means an intra-EU shipment: no customs procedure, no import VAT surprise, and full EU consumer warranty and return rights. [18][19]

That is a real advantage over Keystone, which ships from Asia, and ELLIPAL, which ships from Hong Kong, both of which can add import VAT plus a courier handling fee to the advertised price. Trezor from the Czech Republic and NGRAVE from Belgium share Ledger's advantage.

Buy only from ledger.com or an authorised reseller. The tampered-replacement-device campaign of 2021 is exactly the attack this rule prevents.

If you ordered internationally through Ledger.com, your order may have been processed by Global-e as merchant of record, the system breached in January 2026.

Not verified in this research: whether Ledger Wallet offers a Greek-language interface, whether its transaction export is usable for Greek tax filing, and current euro pricing including Greek VAT.

How it compares

Where Ledger genuinely wins: the broadest asset and third-party wallet support in the category, the best transaction-verification experience on the touchscreen models, an unmatched decade-long record with no device-level key extraction, EU manufacturing and shipping, and the largest support and firmware-maintenance operation of any vendor here.

Where it genuinely loses: closed firmware you cannot audit, the worst customer-privacy record in the category, a firmware capability revealed by Recover that some users will never accept, and no air-gapped option at all.

The clean comparison is the Ledger Nano Gen5 at $179 against the Trezor Safe 5 at $129. Same tier of secure element, similar usability, both shipping from inside the EU. Trezor's firmware is open and reproducible; Ledger's is not. Trezor has now also had a customer data breach of its own, disclosed 13 August 2026 through its fulfilment partner, so neither company holds the high ground on privacy any more.

The risks, stated plainly

1. You are on a list. If you bought a Ledger before 2021, or internationally through Global-e, assume your name, address and phone number are circulating. Expect targeted phishing indefinitely.
2. Ledger will never send you a letter, email or call asking about your recovery phrase. Any that does is fraud.
3. Never enter a recovery phrase into anything. Not a website, not an app, not a "replacement device" that arrives in the post.
4. The firmware is closed. You are trusting Ledger's published audits rather than verifying the code.
5. Recover proved the firmware can export an encrypted seed under an approved code path. It is opt-in, but the capability ships on every device.
6. The Nano X is a tier below the rest of the range on certification.
7. Buying the Stax buys you a screen, not more security.
8. The in-app swap partner has a poor reputation. Swap on an exchange and withdraw instead.
9. Consider how visible your holdings are. The Balland case is the extreme end of what publicity about crypto wealth can attract. Use a delivery address that does not identify your home if you can.

What we could not verify

Deliberately absent above: the definitive list of all eight co-founders; whether Éric Larchevêque holds any current role; Ledger's revenue, profitability and current valuation; whether any IPO process is under way; the number of customers affected by the Global-e breach; the accuracy of the $33 million breach-cost estimate; whether Ledger operates a public bug bounty for its own devices; whether any trial in the Balland case has begun or concluded; app store ratings; and Greek-language interface, tax export and VAT-inclusive pricing.

Frequently asked questions

Has a Ledger device ever been hacked? No. In over a decade and more than seven million units, there is no documented case of a private key being remotely extracted from a locked Ledger device. Every incident in the company's history hit customer data, a software library, or trust in the firmware design, not the secure element.

So why does Ledger have such a bad reputation? Because its customers have been exposed twice, in 2020 and again in January 2026, and the 2020 list has fuelled six years of phishing, extortion, tampered devices sent by post and threats of physical harm. A leaked address list is a different kind of danger from a leaked password.

Was the founder's kidnapping caused by a data breach? No. David Balland was a publicly known co-founder of a French unicorn, and no link to the customer data leaks has been established. The case matters because it shows what the far end of physical risk looks like for identifiable crypto holders in Europe.

Is Ledger Recover a backdoor? No, and the distinction matters. It is opt-in, nobody is enrolled automatically, and the standard setup keeps your 24 words entirely offline. The controversy was that its existence proved the firmware could package and export an encrypted seed under an approved code path, which contradicted how many users understood the device.

Which Ledger should I buy? The Nano Gen5 at $179 for most people, because the touchscreen enables Clear Signing and Transaction Check. The Nano S Plus if budget is the priority, since the secure element is identical. Skip the Nano X in 2026. Buy the Stax only if you want the screen and the design.

Ledger or Trezor? Trezor if you want firmware that you or anyone else can audit. Ledger if you want the widest asset support and the smoothest experience. Both now ship from inside the EU, and as of August 2026 both have had a customer data breach.

What is the one thing I should actually do? Write your recovery phrase on paper or metal, store it offline, and never type it into anything. Every documented Ledger user loss traces back to that step, not to the device.

Sources

All accessed 19 August 2026.

1. Fortune, "Ledger", Crypto 100 listing, Jun 2026
2. businessmodelcanvastemplate, "Brief History of Ledger Company", Mar 2026
3. Tracxn, Ledger company profile, Aug 2026 (funding data usable; leadership data stale)
4. Ledger, "The people behind Ledger"
5. Ledger, "A Letter from Ledger's Leadership", 2019
6. weusecoins, "Eric Larchevêque, Co-founder, Ledger"
7. businessmodelcanvastemplate, "Who Owns Ledger Company?", Mar 2026
8. View from the Back, "French Fancies: Ledger", Jan 2026
9. Bloomberg, Eric Larcheveque profile
10. The Org, Eric Larchevêque, Executive Chairman at Ledger
11. innovation-responsable.fr, "Fondateur Ledger", Mar 2026
12. Crunchbase, Eric Larchevêque person profile (stale)
13. Cryptoast, "Qui est Éric Larchevêque", Oct 2025
14. CfC St. Moritz, Pascal Gauthier speaker profile
15. BeInCrypto, Pascal Gauthier profile
16. Traders Union, "Pascal Gauthier: Biography, Career, and Business Insights", Jul 2026
17. usethebitcoin, "Pascal Gauthier: The Man Behind Ledger's Success", Jul 2026
18. Ledger careers listing via web3.career, Vierzon logistics role
19. Ledger careers listing via web3.career, Paris customer support role
20. Fortune Europe, Balland rescue coverage, Jan 2025 (headcount reference)
21. CB Insights, Ledger company and board data
22. French Tech Journal, "Ledger CEO Pascal Gauthier On That $380M Funding Round", Jun 2021
23. Ledger, "A Message From Pascal Gauthier" (Series C Extension), Mar 2023
24. Quantumrun, "Ledger Net Worth, Market Cap and Revenue", Oct 2025 (investor list usable; CEO claim wrong)
25. Ledger, "A Message From Pascal Gauthier, Chairman and CEO At Ledger", Dec 2023
26. Crowdfund Insider, "Ledger's Latest Security Issue", Jan 2026
27. Ledger Academy, "Which Ledger Signer Is Right for You?"
28. CryptoSlate, "Ledger Flex Review 2026: EAL6+ Security, Real Breach History"
29. Webopedia, "Ledger Wallet Review 2026", Apr 2026
30. CoinGetter, "Ledger Review 2026", May 2026
31. Plisio, "Ledger Wallet 2026 Review", Jul 2026
32. hardware-wallets.net, "Ledger Nano Gen5 Review", Nov 2025
33. CryoVault, "Ledger Stax Review 2026", Apr 2026
34. BYDFi, "Ledger Stax Review", Apr 2026
35. MEXC News via crypto.news, "Ledger Launches Nano Gen 5: Mixed User Response", Nov 2025
36. Pablo Yglesias via Medium, "LEDGER HACKED: If You Receive a PHYSICAL LETTER from Ledger, It's a SCAM", May 2026
37. databreach.com, Ledger 2020 breach entry
38. SiliconANGLE, "Ledger confirms leak of customer data from third-party Global-e hack", Jan 2026
39. Efani, "Ledger Security Breaches Timeline (2018 to 2026)", Jan 2026
40. Ryder, "Every Ledger Hack Since 2020 and What Each Changed", Jul 2026
41. CryptoSlate, "New Ledger breach didn't steal your crypto but it exposed the one thing that leads criminals to your door", Jan 2026
42. Ledger, "Security Incident Report" (Connect Kit), Dec 2023
43. CoinDesk, "Ledger Exploit Drained $484K, Upended DeFi", Dec 2023
44. Fireblocks, "Ledger Connect Attack: What You Need to Know"
45. SlowMist via Medium, "Supply Chain Attack on Ledger Connect Kit", Dec 2023
46. NFTnow, "Major Ledger Connect-Kit Exploit Compromises Multiple DApps", Dec 2023
47. Zerocap, "The Ledger Hack: What Happened?", Dec 2023
48. Yahoo Finance, "Ledger Plans To Reimburse Victims After Connect Kit Exploit", Dec 2023
49. Revoke.cash, "Ledger Connect Kit Hack: Retrospective"
50. Ledger Support, "Global-e Incident to Order Data, January 2026"
51. CoinDesk, "How to stay safe after the Ledger leak: experts urge privacy first", Jan 2026
52. The Register, "Ledger confirms customer data lifted after Global-e snafu", Jan 2026
53. Paubox, "Ledger Global-e breach exposes the risks of third-party cybersecurity", Jan 2026
54. Crowdfund Insider, "Ledger's Latest Security Issue", Jan 2026
55. Yahoo News, "Ledger Hit by Another Data Breach", Jan 2026
56. The Block, "Authorities arrest missing suspect in Ledger co-founder David Balland's kidnapping", Mar 2026
57. France 24, "French crypto company co-founder freed after kidnapping", 23 Jan 2025
58. DL News, "Ledger co-founder kidnapped and freed in France: everything we know"
59. Reuters via Yahoo, "Co-founder of French crypto firm Ledger freed after kidnapping", Jan 2025
60. Fortune Europe, "French military police rescue co-founder of €1.3bn crypto startup Ledger", 24 Jan 2025
61. BitcoinWorld via MEXC, "Ledger Co-Founder Kidnapping: Final Suspect Arrested", Mar 2026
62. Malay Mail and AFP, "Tortured Ledger cryptocurrency co-founder free, seven kidnappers now face life sentences in France", 25 Jan 2025
63. Forbes, "The $100M Wrench Attack: How Crypto Millionaires Became Crime Targets", 25 Jan 2025
64. Sifted, "Ledger founder David Balland released after kidnapping in France", 24 Jan 2025
65. BitcoinEthereumNews via MEXC, "Spain Arrest Suspect in 2025 Ledger Co-Founder Kidnapping Case", Mar 2026
66. CoinDesk, "Ledger Co-Founder's Kidnapping Highlights Threat of Crypto Robberies", 24 Jan 2025
67. AP via MarketBeat, "Kidnappers in France target cryptocurrency entrepreneurs for ransom", May 2025
68. Trustpilot, ledger.com reviews, page 3
69. Trustpilot, ledger.com reviews, main page
70. Trustpilot, ledger.com reviews, page 10

Πληροφοριακό υλικό μόνο. Δεν αποτελεί επενδυτική συμβουλή. Η αγορά κρυπτονομισμάτων ενέχει υψηλό κίνδυνο.

Information only. Not investment advice. Cryptocurrency markets carry substantial risk.